Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/tsdsBjonsE0b89PthmTmM4P4X_c.roa
File: tsdsBjonsE0b89PthmTmM4P4X_c.roa (raw, json)
Hash identifier: TxeAnhZ9MkWuQATX1AnJhb5BAoDUCyr9UfiHrPmPmuk=
Subject key identifier: B6:C7:6C:06:3A:27:B0:4D:1B:F3:D3:ED:86:64:E6:33:83:F8:5F:F7
Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Certificate serial: 019CBCD563046B69B88D22DF76F16F51AF55
Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/tsdsBjonsE0b89PthmTmM4P4X_c.roa
Signing time: Thu 05 Mar 2026 07:10:26 +0000
ROA not before: Thu 05 Mar 2026 07:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42532
IP address blocks: 77.73.64.0/23 maxlen: 23
77.73.71.0/24 maxlen: 24
94.126.228.0/22 maxlen: 22
94.158.218.0/24 maxlen: 24
94.158.219.0/24 maxlen: 24
94.242.48.0/24 maxlen: 24
94.242.49.0/24 maxlen: 24
94.242.58.0/23 maxlen: 23
94.242.63.0/24 maxlen: 24
185.22.172.0/22 maxlen: 22
185.145.245.0/24 maxlen: 24
185.155.119.0/24 maxlen: 24
185.242.104.0/22 maxlen: 22
185.242.106.0/23 maxlen: 23
212.6.44.0/24 maxlen: 24
2a0c:16c0::/32 maxlen: 32
2a0c:16c1::/32 maxlen: 32
2a0c:16c2::/32 maxlen: 32
2a0c:16c3::/32 maxlen: 32
2a0c:16c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:d5:63:04:6b:69:b8:8d:22:df:76:f1:6f:51:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb
Validity
Not Before: Mar 5 07:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6c76c063a27b04d1bf3d3ed8664e63383f85ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:f1:3a:2c:c9:54:d3:dc:39:68:96:4d:42:
8d:11:52:8c:a1:90:65:a8:ae:d1:7d:4f:84:67:97:
ae:3c:99:67:4c:f2:94:36:ca:73:c9:12:0a:10:15:
74:81:2f:13:23:9b:e1:fe:a3:98:ab:35:52:cd:59:
eb:78:01:45:82:57:b5:d0:7c:b7:21:16:be:72:a2:
ab:da:91:94:13:55:a3:42:e3:cc:07:e5:5e:f0:9e:
e0:ce:4d:7c:38:47:ef:bc:19:74:b0:db:ea:7d:31:
5b:69:d7:68:5d:29:f8:37:f0:78:27:70:08:7a:14:
62:d4:26:7a:c2:4a:9b:a0:68:42:ba:59:03:d2:f7:
10:fa:2e:6b:44:63:0f:9f:ba:01:33:7d:c2:ce:05:
d4:40:b9:01:b7:01:f4:9c:59:88:b8:bf:44:fb:4d:
2e:1b:e4:c2:ce:18:53:68:33:21:5d:0b:88:a1:c8:
93:53:03:e2:b9:ff:47:70:d5:83:f5:2f:fb:be:83:
fa:fb:40:75:86:74:02:38:ea:ce:0b:07:44:57:fc:
da:27:4a:43:7a:3b:50:26:26:a5:92:45:1b:cc:f1:
d9:3d:e2:de:0b:6c:59:9f:5e:e5:c1:f7:44:58:1b:
83:59:93:69:35:92:ae:90:f1:df:83:10:46:ca:63:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:6C:06:3A:27:B0:4D:1B:F3:D3:ED:86:64:E6:33:83:F8:5F:F7
X509v3 Authority Key Identifier:
keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/tsdsBjonsE0b89PthmTmM4P4X_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.64.0/23
77.73.71.0/24
94.126.228.0/22
94.158.218.0/23
94.242.48.0/23
94.242.58.0/23
94.242.63.0/24
185.22.172.0/22
185.145.245.0/24
185.155.119.0/24
185.242.104.0/22
212.6.44.0/24
IPv6:
2a0c:16c0::-2a0c:16c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:95:45:4f:b7:76:4f:45:34:c9:3d:b3:81:58:a5:8a:cd:8b:
ea:f0:37:e5:2e:b0:d0:c5:b5:b8:75:3f:9c:32:a2:aa:00:93:
ad:56:bb:7a:9b:46:57:90:5e:5b:48:68:02:a5:b8:14:33:72:
d6:f0:5e:04:aa:55:66:08:87:5c:b3:8f:0b:e1:8e:53:57:ca:
79:a6:e0:85:4e:ff:78:18:70:e6:42:c3:35:7a:da:4d:ae:d9:
8e:65:9d:e0:f2:e9:a5:c9:9d:4a:a3:2b:11:3a:f0:fc:d9:a7:
f4:86:03:89:47:31:ac:02:e4:86:df:7f:84:65:7b:e9:dc:fc:
84:a2:2f:21:38:66:0e:f4:ed:6c:99:17:b8:ad:dc:c9:91:e9:
85:85:cb:2e:0b:9d:56:5d:7c:9f:c8:16:e3:68:29:54:77:23:
11:e2:6e:95:85:c3:4f:25:8e:aa:66:b4:47:87:da:94:df:b2:
8e:fd:de:f1:94:e9:fa:88:4c:e0:33:fa:8f:f1:69:85:a1:ef:
af:56:20:d6:2f:3f:cd:c3:a0:c5:df:c8:e2:22:11:bb:e2:91:
02:35:a6:84:a2:c9:ea:8e:df:9c:31:53:73:07:5d:0e:eb:46:
54:67:e1:45:98:f1:6b:33:cc:68:d0:59:41:73:38:5d:4e:68:
ac:84:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:41:25 2026 by rpki-client